Roxen web server earlier than 2.0.69 allows allows remote attackers to bypass access restrictions, list directory contents, and read source code by inserting a null character (%00) to the URL.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Webserver | Roxen | 2.0.x (including) | 2.0.x (including) |